Loading controls...
Control: Replication Controller containers should not use CAP_SYS_ADMIN linux capability
Description
This check ensures that the container in the Replication Controller does not use CAP_SYS_ADMIN Linux capability.
Usage
Run the control in your terminal:
powerpipe control run kubernetes_compliance.control.replication_controller_container_sys_admin_capability_disabledSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run kubernetes_compliance.control.replication_controller_container_sys_admin_capability_disabled --shareSQL
This control uses a named query:
replication_controller_container_sys_admin_capability_disabled